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ABSTRACT 

Block diagram schemata model computation systems In the context of an 
external environment. The environment Imposes various constraints on the real-time 
performance of any implementation of a Mock diagram schema. The model Is used 
to provide precise defMtkxis of reat-tbna pmfomtmem. The portton of the 
Implemantatton that affects the r«a»»Miie performenGe la called the control 
structure. 

This research Investigates several strategies for s^theidzbig control structures 
to satisfy ^e external real-time specHlcations. The simskMt strategy is to 
execute all the btocks in the dlagrUR Hi eome fixed Order. Control structures of 
this type have been somevvhat Ignored lor ttaie crf^ai aiHi^Gatkms. The synthesis 
problem is showm to be soh/able In the smise ttiat aeycNe control structeires do not 
need to be considered. A branch-and-bound synthesis algorMlim is presented which 
requires exponential tkne In the worst case. Amwuf^ no efRdent synthesis 
algorithm was found, the conjecture ttiat the probtem is NP-complete is not proved. 

The other strategy for implementing control structures makes use of the fact 
that in some appHcatkms the Input values change at discrete times. Under tWs 
assumptton, bk>ck diagram schemata are similar to traditional models of real-time 
computations. An efltelont algorithm for assigning fixed prtorities to Independent 
tasks Is presented that guarantees the realtime spe<dflclitk>ns will be met. This 
algorithm relaxes prevkxjs restrictkxis of the deacMne for a task being ooincideht 
with its next request. 

Finally, some of the issues Involved with multlpie processor control structures are 
discussed, although no specific algorithms are investigated. 
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Real-Time Control StriM^tures f» Mock Diagram Schemata 

1: IHti^yctkHi 

There are many applications for coinputers Whwg, the real-time perfor^^^ of 
the program Is critjcaL These appllcatlpngjrtj Jnydvci^^i^^ with 

the external environment and it is this envlrOTment that Jli^wses the real-timp 
restrictions. For example, daylca clrivers V^ j^ora*^ 
Interrupts before the Informaittari Is tost^ Anothw ap|3%«^^ 
control and process monitoring. 

However, most high-level languages ar^ not designed fof p«>duclng time critical 
programs. The languages allow the user to defkte appropriate functional and data 
abstractions for his problem, but have no rK>tion of real-time or asynchronous 
interaction with the real world* Instead, the user must design a control structure 
for his problem suitable f<^ a single sequential process that wiH satisfy all the 
real-time constraints. 

1.1: Previous Work 

Many operating systems do have notions of real-time and external Input and 
output, but they are supported at a fairly low level [10, 20], The appHcatton 
program typically has to deal with priorities, setting real-time alarms, and responding 
to interrupts. These actions may be necessary to satisfy the constraints, but they 
do not bear a close rela'ttc^ship to the cons'b'^nts. For example, it is seMom 
obvious what prk>rity must be assigned to a task that must complete in ten 
ffliliiseconds and uses one millisecond of CPU time. 

Early work on applicatk>ns oriented real-time operating systems was done by 
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Fiala [5]. Fiala proposed a model of real-time processes characterized by three 
parameters per process. 

(1) P. the maximum CPU time used by process /• 

(2) D^ ttie maximum delay aiHmmA f rem tte time process / requests service 

to the compliltton of servtclhg that request. 

(3) r^ the mtrrtmum period between mquiists for process /. 

Flala proposes three scheduling algorithms fcM^ this model. The first (and 
simplest) executes the process that must complete the socHiest. I.e. the process 
with the earilest deadlhie. This algorithm Is optimal in the sense that If any 
schedule satisfies the deadline requirements for all the processes, so does the 
eartlest deadline schedule. However, this result is proved In the context of 
l»rocess switching requiring negligible overhead. 

Flala*8 second algcMrlthm Is a iiKKHfication of the earilest deadline schedirfer that 
minimizes the number of process switches while retaining the opthnallty ccmditlon of 
ttte eartlest deadline algorithm; TMs is acc<»i^lished by having the scheduler check 
to see If ttie current process must be pr^nn^ted when a process with an earlier 
deadline requests service. This is done by simulating the actkni of the scheduler 
on the current requests. Unfortunately, ttris algorWtm would require extensive 
computation v^enever a process requests serxrice. Accordingly, Fiala^s third 
algorithm pre*computes a lower bound on the expressk>n required by the minimum 
switching algorithm. )N\th the k»wer bound, the extra ocmputatkm required by the 
tWrd algorithm requires an extra comparison at process request time. The algorithm 
Is also optimal In the same sense and requires less overhead than the simpler 
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earliest deadline algorithm. 

However, Flala makes no attempt to Integrate his model and scheduler Into a 
real- time language system. One such approach la centred robotics developed by 
Dertouzc^ [3] and Qeiger {6]« A (»>n^ robc^ca^ progf^am la or^tnladad as a set of 
daemons which continuously monitor some c<viditiof) and j^xecute th^ tMKJy (a 
corrective procedure) \^en the condlttoo Is true. The i:Qal*tjn^^^ecMflcatk>n9 for a 
daemon are the delay from when a condltk>n becomes true to when the program 
detects the condltk>n (the recognltk>n time) and the delay from detecting a 
condition and executing the body (the response time). Geiger's implementatk>n of 
control robotics periodically samples the condltkMi with a period slightly less than 
the recognitkHi time (the slightly higher rate wHI altow for preemptk>n by other 
daemon condittons). The daemon bodies are scheduled using an earliest deadline 
scheduler. 

One weakness of control robotics Is that no guarantee of satisfying the real-time 
constraints Is made at compile time. This c<H4d be <tone If the user declared a 
minimum perk>d between executknis of a daemon body and the compiler determined 
the computatk>n time of the daemon bodies. Since it is impossible to determine the 
computatkHi time for an arbitrary procedure, the compiler may require declaratk>ns 
to determine the computatk>n time. 

A more substantial problem of Geiger's implementatton Is the assumption that the 
conditions for daemons are Independent of the executton of other daemon bodies. 
Therefore, complex structures of daerm>ns whose conditions depend on variables 
changed by other daemons could result in much urmecessary computatk>n. Ail in all, 
control rot>otics does rK)t provide any more of a model for realtime programming 
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than Fiaia*s work beyond suao^atlnfl somp , jsyntipc for identifying tasks and 
S|M9clfying J^eir di^acWnas* 

Another system that deals with reahtlme ffneoiSpations at the user level Is 
TOMAL (Task <>Hent0d Micrsfm^ surf iwe TOMM. is a 

combUiation of a imxtern bkKsk structureft prog^ amirtf^ IwgMcme and a typic# n^h 
ccHnputer VeahtlmeV operating system. H<mm0v«i bs addltton to asaj^ii^ static 
priorities to tasks» a resiwise time may be sfieclfled far a t^ak. TWs response 
tlm0 Is similar to the r<^coiinlt|OMn time for c<«rtrpl t«*pt|crti i^ maximum 

delay between a request for a task actlvatk>n and the Int^^fqii jof that task. 
Another feature of TOMAL is ttiat ii^Brrji^t roMtines on^ reqj^e^t task activation and 
do not respond to tl^ interrupt Ui any substantive way. This reduces the cmount 
of object code that does not run under the taalc scheduler aii# aHwi^ ^N» TOMAL 
system to check the G^#$tency of the i:eal*tiaM» consl^ahlts^:^ syst^. 

However, TOMAL maltas rio attempt to vsflfy reaHlff^B fl^BCl^a^eris on service 
tiimas for tasks. 

Data flow 90hemirta deserve mention as a rsal^^la^ system since one proposed 
applications Is c^tal sifM^ial paK:M»»^iog [2, ZE}.^^^^^^ facilitate highly 

parallel computatlcm an^ statements may be executed as soo^ as ^ their li^ut 
variables tiav0 been coav>uted. If several statMoents are exMsutable an arbitrary 
statement is chosen. HoMvever/ with the additioii of reai-tlioe <»istraints to mecttate 
this decision^ data fkm would be a powerful rsNiHifliA sys^Mi« The other major 
drawback of data-ftow is that Is not suited for ImplMieiitstkm on conventional 
computer architectures. 



1.2: StatatneHf of the PrdMMi 

The goat of this research Is to develop theory that is applfcabffe to the 
Implementatton of a prooreMitihiEr sj^teinf d«Niigned to the r^r^ domaih of ^me- 
eriticat applicattons. The main criterkm of the ^tiftafa^Mty of th^ ^^^^te^^ 
domain shouid be that smisH changes fn the reaHliRe ep€K:i1lcati(:Nis stoutd resutt in 
smaHi o^viCK^ changes in the source program: it is csdeoeK^^ 
desirabie, that these charges couTd have «l dramatid effect on the (4>Ject program 
produced. This reor9ani2atibn of ttte object pr%»cp^m is prectsefy the pitk:ess tiiat 
shmrfd be automated. 

Conventtonai languages already provide facffl^He^ for functiofial and data 
abstraction, and numerous researchers are already ^Mork^ fnthis area. Hierefore, 
this researcHi wilt focus on the gkAal contrcrf abucture for fm^fp^ams. This tnctudes 
issues such as the number of processors to %Msm \m wrt in^riementatibn, deciding 
what intemipt structure (if any) is necessary, chKsonviosing tht ipn^oCH'^ffl into tasks, 
and assigning parameters required i>y the appr^rlate task scheduler. 

Since normal language semantic issues are brtng avoided/ tite descrlptkm of a 
program can lie made extr^neiy simple; The intuffive mod^ for a realtime program 
Is tfiat of continuous t)me anatog bk>ck diagrams. Ihm graph defines a precedence 
relation amcMig operators identical to the daita fibw In the c^c^Mi. The program Witt 
be specified as a directed graph of actions to be perforHied and their furrctfonal 
dependence, with arcs of the graph repres^itlng data patte. Hie grai^ must be 
acyclic since cycles in a bkx^k dia(^am represent feecftack systems. Automaticaliy 
producing an object program that soK/es the feedback equatlcMi would require more 
detailed semantics for the programs as well as other disciplines outside the scope 
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of this research. However/ In »o«esp^cl«f cases ^ cycles can be handles by 
re^yranoing ttie bkx:k dtasr«n. A strict upp^iribou^ must be ^aced on ttoe 
computation time requtrett for each action, ft* real-time constraints apectfy i^per 
bounds of the ptopagatton detaiys^ throimh «ie feto^ dtagram an* of the bawiwdths 
of the Input ami output s>|^ite« 

1,3: Thesis Overview 

Chapter 2 develops the biock diagram model of computation. The block diagram 
model Is a program schematic model similar to data flow. However, reai-time and an 
external environment are explicit In the mcxiel. In addition, the block diagram model 
separates the datarftow of the schema from the control flow, which is embodied in 
the controi structure. The control structure specifies the execution order of the 
btocks at object time. The research problem may be formalized as finding control 
structures for bk>ck diagram schemes which satisfy the given reai-time 
specifications. The major use of the model is to deffrie the semantics of the real- 
time specifications. 

Chapter 3 Investigates vartous static ccHitrol structures (ccMitroi structures that 
are independent of the data values at object time). Although static controi 
structures may be uscid widely in specific appllcatk>ns (particularly In small, 
dedicated systems such as those implemented on microcomputers), they have been 
Ignored by designers of real-time programming systems, mainly because their real- 
time performance In the general case has not been studied. 

Chapter 4 investigates extended semantics where the external Inputs do not 

change continuously. In this situation, a dynamic control structure may be used. A 
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dynamte control structure is a con^oi ^structure ttiat do^ depend cm the data 
values at object time. The chapter investigates a sutelass of dynamic oor^rcd 
structures, nam^y static priority interrupt contrcrf structures. The protdyi^iid 
exaaHE>1e Is an kiterrupt system v^ere the systefil does miWrni tmtil an Input 
changes, although it Includes systems without physio^ ifitemiptsvrhffi'e the ii^iuts 
are sampled. The priorities are static as opposed to the earliest deadline 
scheduler where the priority of a task Is a function of time. 

Chapter 5 discusses some of the Issues that arise when more than one 
processor Is available for the Implementation. The real-time p^formance of 
multiprocessor systems are analyzed and the reaf-ttme performance of a block 
diagram schema is bounded. Some techniques for distributing the processing among 
several processors are suggested, although specific algorithms are not studied. 
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2: Block Diagram Schemata 

Most models of computation do not capture the notion of a "real-time" system 
whidh monitors continuously changing hnpulai from aome externa) environment. Biook 
diagram schemata modef the external envlrtMlment eXi>licltly amd recognize the 
existence of real-time epecifk^atlontf i>iaeed by the efrvhxiftment on the computing 
mechanism. They are based on the Ihttrttive iBodei of the seom/tfrrtlonal analog biook 
diagram whose inputs and Oir^uts are changing odntJhuously. An (m,n) block 
dt^f am schema cdttsists of an (m^) btecA ttf<i^ram mocbitmiii ooiafol structure, a 
conflguraition and an wwlftmnaat which flMinipuict<»s the configuration 
asynchronously with the contr«» strtioture. WtthW the MOdort, It !• «ssuma^ that 
values change Gontinuousty. <Miivk)U8ly, the computattens cannot be f>erformed 
eontlniiousty on a digital computer/ The rMf^e epedMoafkms determine how 
dften the control structure must compute hew i/aiues, as w«K as how fast it must 
compute theiM^ 

An (m,ny block diagrtm modala Is a cBreeted graph whose nodes are either 
Motiks xir links. The terms pre</6ce»»or and svecessor will be u«ed *lth the 
oonventlcMVal deflhttibtto. DatA le stored tn 1^ Hnl» wMi» the Mocks perform the 
actual com|i>utation. Accoirdlngiy, only one are may point to each link. The graph 
must be iwtJper In the aenee that arcs may not point from ilnlcs to links or from 
bkitiks to blooks. Uppercase tettere wiii be used to tienotv Moeke and lower case 
letters to denote llhks. Th6 f>r«decee8or of a «iA Is CMtlled th«i spocWer of that 
link and the auccessors of a IWk are caNed the watc/iers of the «»*. The 
prededessors and suooessora of a btodc arecaMd the ifnpcft* and outputs of the 
block rettpectively. 

An (m,n) module has m Hnks with no inptrt area f/npot //«*»> and n Knto with no 
(Nitpttt area (output links). Th« Input Hnks receive tbefrvaiuea from an external, 
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COTtinuous time func^ton called the inpift slg^ei, The valines at the output Knka 
define an external, continuous time function c^lad th^mitput slgnaf. 

The model aasumea tiie existence of a glokcU ctock )i^^h def^ies the paasage 
of real time. Hewitt ari^ea against Hie u^ of gtobat clocks since tiray canaot be 
impiemented in distributed systems [9]* VMille Hmiittt^pb^^ttons against global 
clocks are valid, assigning times within Hewitfs framework of locai ordering^ woiM 
be more complicated. T^ complexity Is unnece^iaiury .sinc^ the events being tkned 
are always ordered by one of He^i^tfs k>cal ordefir^^. 

A con§gur^lon Is an assij;Nin>ent of toAem to ttie lirUcs of a scheflMi* The token 
contains a value and a set of labrts of the form (///iA(, birth). These labe^ IncHcate 
when the token arrived at the input Hnk Unk. Each iMc a>wa>^ ccMitains smne 
token, since signals are always defhed in a continuous time bkx:k diagram. 

The computellon of a bkx^k diagram schema te described by a series of 
snapshois. A snepshot con^sts of a btoekr cM^am PG^ule and an associated 
oonflguratkxi. ITie initial snapshot assigns mili values to aR tokeris except for 
tokens on the input links of the schema v^ldi are a^i^wd the current viriue of 
the input signaL The label set of aN Ikiks is InitiaHzed to {{//Aft, 0)}. The 
computatkKi proceeds from one snapshot to the ^pct through the Mring of bkMsks. 
Hie cof^ol structure is ^e strategy f or chooaiBg wMeh btock to fire n^ct The 
fired bk>ck accesses the tokens on Its input IMis, arMi repUieee the :^ens on its 
output links. The label set for ttie ou^ut tpken becoiies the uniea of the oM label 
set of the token and the label sets that were assigned to the tokens on all tbe 
input links of the blocks The time in the label ii4) for the link /at eech input arc 
of the fh'ed btock is reptaced by the label (/^/me), wbere t/me is the cxirrent 
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contents of the global clock. Thi6 action occurs after any tokens have been 
replaced on the output Ikiks^ but thei time for the itew i^bel 3et?t is ^niediately 
after the Input tokens iwere accessed. In ii<Mitipn» If / is ^an Input liok> its value Is 
set to the current value of the input signal. The lpflQck^rH3ta<tnpt r#|)iace any output 
tokens. This differs from data ftow since tcdcens are not removed from the Input 
links after a btock is fired* The data fk>w restrictton is not appropriate since tiie 
value of a token Is defined at all times. 

The amount of computatton time used by block A is denoted tj^. If the control 

structure fires bk>ck A on some processor at time tj^tha^tprppesspr will com^ 
and replace the output tokens on that block, by the time f+t^. The computation 

times used will be upper bounds either cocnpirted by whomever langiM^e processor 
Is used to create the prtraltive bk>cks or declared by the us0r> 

2.1 : Real-Time Performance and Specifteations 

A bk>ck diagram schema is an approximaticm to a continuous time block diagram. 
There are many factors affecting the quattty of the approximation. However, the 
factors infltiericed by the control structure are hbw long the schema takes to 
compute the values of <HJtput tS6fcens from th* input token*, and how often It 
performs these coiiH»utations. The real-time sp^cfffcatkif^ ^1 pTaoe bounds on 
these quantities. A control structure that satisfies all the real-time speoifte^ettons is 
calN»d ft feastbia control struc^flre. 

The age of a token %^^ reject tx^ a link / ftt thne t Is d«nr»d as t-tg If (I, Jq) 

Is In the label set of the token, and undefln^ed otherWis^. fh^ /atency between 
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links a and b is derK>ted 1^^ arvd is the uppm bound of the age i^ any time of 

tokens at b with respect to Hnk a. The usef cari spectf^ ah upper boiind on the 
latency between two Hnks. The first Hnk wMt^d an input link of the sche^ and 
tire second Ifnk wHI be an output Mik. 

Latency specHteattons can also be expressed In terms of ccMitTnuous-time 
ftmctkwis: 

b(t)^F(a(t-A{t)\ ■ . ). A(Oil^^ (2-1) 

Here bit) is the functk>n whose value is the value of the token at link b at time t; 
a(t) is the function whose vahie is the slgrial at ttrric a at time t; A(l) corrmponds 
to the age of the tokens at link b. Notice that A(t) is generally ogt consfantt but 
Is bounded. T?ie isser knmirs how ck^e b(f ) M^t be to l»(0>F(a(t), • - * ). Using 
InformatkKi about the magnitude of f^ and a and Ihitfr derf^ratlves, tite user can use 
equation (2-1) to calculate the latency speclfteations necessary to achieve the 
desired accuracy of b{t). 

The other measure of reahtkne perfcMmance is how often new values are 
computed. The bandwidth from link a to link b (notation B^.) Is tba maximum rate 

at which the control structure must oomputo eew viriMes at^ frqin voMiea et & The 
bandwidth speclflqatton Is not easily expresi^Me in terms of contt^JOi»-ttaMi 
functions. It may be thought of as a reqi4l«m^ on how€|ft«a tiie ^^hie of M^) 
imist charge. 

The bandwidth speclfteatkxi may seem sui^^arfiuto^B shme the latent 
spectfteations alsa imr^as how oftMi the^^ vato6 of £(t) eherqieii* ikmmmr.it is 
possible for a multiple processor contr^ structure to exhibl1ti>fndwidth performance 
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that exceeds the rate implied by the latency specification. An example is shown in 
figure 2-1. 




tyj « ^ 0msec 

tg « ^ 0msec 

B^ ^ « 75/sec 

I ^ - 40/nsec 
&9C 



A block diagram schema requiring a multi-processor control structure 

Figure 2-1 

In this example, both A and B require ten milliseconds of computation time. A 
single processor control structure that executes ABABAB • ■ ■ can guarantee a 
latency from a to c of forty miltiseconds and a bandwidth from a to c of fifty per 
second. However, if processor one executes AAA ■ ■ • and processor two 
executes BBB ■ • • , then the latency from a to /? is still only forty milliseconds but 
the bandwidth increases to one hundred. 

While the block diagram model is useful for defining performance for real-time 
programs, it does not yield many insights into the problem of synthesizing a feasible 
control structure. The graph itself resembles a partial order on a set of tasks, but 
the semantics of block diagram schemata are not as restrictive as this partial 
order* In most schematic models, a task must not be executed until all its 
predecessors have been executed since (presumably) it would not have data 
available at all its inputs. The block diagram model has no such restriction and as 
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a result is abte to execute eome parte ^ the schwMaiore often^cur^ther parte. 

On the other hand, there are certain execution orders that can be ruled out 
since they are obviously inefikHent. For exMipleronce a block has been fired, it 
need not be fired again until one of ite predeces^>rs has been fired again since all 
Its inputs will be unchanged. Therefore, It outputs will irat change. Similarly, If no 
successor of a block A Is fired between Iklngs of 4, the prevtous executkm of A 
was unnecessary since no bk>ck kx^ed, at ttie previous values of the tokens on 
the output links of A. 

If these restrictions are combined, each firing of a bk>Gk must be surrounded (In 
time) by at least one predecessor and at least one successor. Equlvalently, the 
altowable executkm sequences may be fmmd by shufiing all the paths from an 
Input link to an output flnk. HwMie paths wlH be refwrerf to as o«8l^«/flt paffts or 
Just consU^ain^s. 

2.2: FunctkMiality of Bk>ck8 

The semantics of bk>ck diagram schemata make some useful block functkms 
awkward to implement. For example, a bk>ck that performs dlfTerentiatlon Is 
essential for appllcatk>ns in real-time process mcmitoring and control. In classical 
direct digital controT, the system Is discretized by sampling at ^me specific perkxl. 
DlfPerentiators are replaced by unit delays and l^e feedback gains are adjusted 
appropriately. This Is possible or^ because the inputs are sampled at a known 
frequency. 

In bk>ck diagram schemata there is no guarantee of periodic executk>n. The 

bandwidth specificatkxis set a k>wer bound on how often a bk>ck must be 
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executed, and a different lower bound may ber in^l^l by the latency apecifications. 
They (to not place any upper bound <m how often th^ block is executed. 
Therefore, it Is Impossible to tell a pr/o^/ wl»fi and how often a block will be 
executed. This wc»ild seem to ntia out any bk^3 l^at would require state 
vaHsMes, but this Is not tritt. A wMte nc^se {^Mrator could be h^lemented using 
a pseudo-random number senerator. This wc^i yse a state varlaMs, but It would 
not run into amy probleii^ by not loftowlng how often It is^x^ecut^ But most other 
functkms Hiat na^d to produce or trms«EMwa^Mrodw>^ o* values 

will be Impossible to implement. 

The only general solution to the problem is to have a real-time clock as part of 
the system. Then a differentlatton bk>ck could remember both Its previous input and 
the time It was last executed and compute the obvious t^st order approximatton. 
The major difficulty Is that the real-time tjlock would hav* to provide much finer 
resolution than the 60 cycle ck>cks found in typical computer systems. 

The user should be able to define bis own time dependent functkms since any 
selection of primitive blocl^ wHI probably turn out to be too limited for some 
appHcatton. Therefore, It becomes vnecessary to provide some primitive blocks 
which would probably lead to nonsensical programs if used carelessly. In particular, 
if the user had a unit delay H>k>ck and access to the reahtime ck>ck he could define 
arbitrary approximations to differentiators, although undisciplined used of the unit 
delay bk>ck would result in useless programs. 

Implementing Integration would still be a problem since the block diagram for a 
first order Integrator would contain a cycle (see figure 2-2). The problem with 
cycles is that It is unclear whether the cycle represents use of a state variable, 
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as In data flow, or implied sohitloii of simultaneous wnuattoiWi ^«s In continuous *lme 
block diagrams; In the case of inteflraftor* It Is deer that the cyole rejwesents use 
of a state vaflabte, since the cycle contains a unit delay btock. In this case* the 
cycle can be broken at the Input to the delays bloek. The datay block Is treated^ 
a watcher of Hnk e, even though It gets Its Input f row link f. This transforwatton 
alters the order In which the bkksks are execirted tey changing the coostraint 
paths. Unit delays were handled by * shirilw trane lot a wtl o n In BLODI [11], a 
system for shmirating discrete thrtebteek dleor«n».«<*wottld be h«idl«d In the 
same way by a programmer [21], 



time 




A Block Diagram Containing a Cycle 
Figure 2^2 
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2.3: Example 

The interaction between the real-time speciflcationa and the control structure 
can be illustrated by a series of exampkis. ht tiiese examples the block diagram 
module is left unchanged while the iatency and bandv^dth speclflcatkMis are varied. 
These variations wiH necessitate cliar^s In^ the c^bntrd sttucture used to 
Implemmit the l^ioclc diagram scl^ma^ The bloelcxdiagrjmi m^^ itself is shown in 
fH)ure 2-3. 
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Typical biocic diagram schema 
Figure 2-3 

The simplest control structures to consider are cycles that repeatedly execute 

the bioclcs in some fixed order. There 3! (= 6X ways of executing four blocics once 

per cycle (Ignoring starting transients). For a small example lilce this it is feasible 

to enumerate all such cyqies «^nd test them to see If they satisfy the latency 
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constraints^. All those control structtn'es are independent of when new tokens 

actually arrive. The worse^case a^^imption is that i9i new token arrives iimnedtetely 

after the prevk>us token Is marked <4d. Tfils asaumption 48 used In caldulating 

worst-case latencies, wh^ ^tb shown in ^^e 2-4; fik^M th«^ although ABCD is 

better than ACBD and AD6C is better ^ttimADCNif theirs !s ndt^^ <:m^ 

In fact, we can choose la^&ncy ^>«:Meatkms mich «»t only one of tf» control 

structures will work. The first six control structures in figure 2-4 sample the It^MJts 

<Hice per cycle, i.e. once every 30 time units. However, if any of the bandwidths 

B^^. B^ , or B^ X is greater than 1/30 then some other control structure must be 
a,c a, f Q>' 

used. 
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Latencies for static control structures 
Figure 2-4 

A slightly more complicated class of control structures Is cycles where some 

bk>cks may be executed more than once. For example, the control structure 



1. However, such an algorithm is not practical since the co^utafkNi time taken by 
such an atgcNithm woiM grow exrK>nentfally vhrtth 1^ mimbt^ d^ 
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ABCABD has worst-case latencies as shown in figure 2-4. This control structure will 
satisfy Its bandwidth constraints if B^ ^ Is less than one every twenty time units 

and B ^ and B^ ^ are less than one every forty-five time units. 

The next class of control structures to consider are dynamic control structures 
with static priority scheduling. These control structures make use of the current 
environment to determine which blocks to fire next. The dynamic control structures 
assume that the values of tokens at Input links do not change continuously. When 
the value of a token at an input link changes, a request is made for a set of tasks. 
The request Is serviced by firing a fixed sequence of blocks as specified by the 
task. Since the processor is generally busy when a request occurs, the requests 
are remembered until the processor is idle, when one of the requested tasks is 
selected to be executed. Each task is assigned an integer priority. The task with 
the highest priority is serviced next. The scheduler Is static since the priority for 
a task is always the same relative to other tasks. The earliest deadline scheduler 
Is an example of a dyncunic priority scheduler, since the priority of a task depends 
on its current deadline. If the task being serviced can be temporarily suspended, 
the control structure is preemptive. 

A dynamic control structure need not be interrupt driven. For example, the 
control structure could sample the inputs between executing blocks. However, 
preemptive control structures cannot be implemented without interruputs. 

In the example of figure 2-3, there are many ways to construct tasks to be 

requested by changing inputs. One such task system is to fire ABD (or ADB) when 

the value at a changes, and CD when the value at d changes. The worst case 

occurs when the values at a and d change simultaneously. The latencies for this 
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case are shown In figure 2-6, These latencies can be s^afried only If the 
banchA^tmis at a and d are l>otft less tfian once evwy 35 trine linlts (otherwise tf»e 
control structure would fail behind). In a sustained worst case, new tcAens arrive 
once every 35 time units. A trace of btocic firings would seem to indicate that the 
static control structure ABOCD is being executed^ which has latencies 16 to 20 
units larger than those for the dynamic amtrcH structure. However, In the dynamic 
case It is known exactly when the input signal change, in particular, the processor 
win be idle if more than 36 time units eiapse between a change in Input signais, so 
the processor will be able to respond to a change Immediately. In a static control 
structure, the change would not be resporuled to until ttie control structure gets 
around to it. 
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Latencies for dynamic control structures wHft italic scheduiefs 

Figure 2-6 
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3t Static Control Structures 

The main function of the control structure In a schema Is to specify when to fire 
each block. If the control structure Is indei»^rHlent of the configuration (i.e. 
unafTected by chanoes made by the enyironment}.it is a st«^/c control structure. 
An example of a static control structure te ^ joc^ wWch ffcrfs all of the blocks In 
the schema cyclically. Control structures which make use of configuration (e.g. via 
Interrupts) are called dynamic control structures. 

The latency specification from a to b will be satisfied only if all the blocks along 

all paths from a to 6 are Ifred at least once during each time Interval of duration 

I . time units. 60i«rwtee there would be Ihne Intervals fonger thin ^ *^ when the 
a,o wi** 

a-labei at £> wtti not change and therefore the age with respect to a of the token at 

bwm be greater thin 1^ ^. Slifnllarly. the bandwWth specMteattoh from a to l> win be 

satisfied if and ohiy If the Interval between ftring the blocks atong the constraint 
paths Is less than 1 / B^. 

For single process<»r control structures It Is possible to construct a trat^ of the 
bk>cks that are Ifred by the control structure. The trace Is a string over an 
alphabet 2 whose elements correspond to the bk>cks of the schema. Each element 
A of 2 is assigned a weight (notatton \A \ ) equal to t^. The weight of a string is 

defined to be the sum of the weight of its elements. A string S^ contains S2 if ^H 
the elements of 82^?^^^ •*» S^ '" t^« order they appear in Sg. For example, the 
string ABODE contains the string BD, even though fiO Is not a substring of ABODE. 
Regular expressk>ns will be used to denote sets of strings. In partlculari If S is a 

string, S** denotes the set of string SySS, SSS, • - • as weH as the empty string. 

It Is necessary to model Intervals In continuous time of arbitrary origin and 

duration, since the latency specificattons require aU Intervals bf specific duratkNi to 
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contain the corresponding constraint path. Ther^fbre the weij^ of the Initial and 
final elements of a string may be tountord at 1^»8 than tfielr fidiNNiiel welgfhtit; Tk>r 
example, If la-,- • " «^| -tv (weighting a^ ^^^ ^/^ «t |d^| aend |a^|X ttwn 
[a^ ' " ^^3 '^ ^ string of weight less tiian iv since boUi a^ and a^ are weighted 
at less than \a^\ and |a^ I- However, if the biltial or final dements do not have 

full weights, the may not be includf^d as part of ^ny ccmtained string. Welghtlrig 
these elements at less tfian their fuH v#iu0s jporrfwpcp^s to an interval of 

size w in continuous time: If the interval starts after a ^ starts executing, then the 

Interval does not contain a^ reading its InpatSv A strj^ wili b9 preceded by a /[* 

or followed by a * J if the first or last element in thf sfrbig Js vire^t#d at less than 
Its nominal value. 

A single processor static control structure is cM^>let#ty specified by its trace, 
which Is determined at compile time (hern^e the rmme ^at/c conto>l structure). The 
real-time specifications on the control structure can be rephrased as constraints on 
its trace. In particular, the latency specification from a to fr Is satisfied if and only 
If all the constraint paths from a to 6 are contained in every substring In the ti-ace 
of weight l^j^. The bandwidth specification Is satisftod if and only if the weight of 

ail substrings between occurrences of the constraint patiis are Ims than 1 / B^j,. 

At this point it Is possible to deal exclusKpely ^h tiie trace of the control 
structure and the constraint paths. Constraint path / will be denoted Cy yfAth 

latency specification 1^ and bandwidth specification By. If C^ is a path frcnn a to b, 
'/ ""'aJb ^"^ ^1 *'aJb' '^ ^^^ ^'^^ '^ necessary to deal with the tails of the 
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constraint paths. If C^ "<^/,iS\2 ' ' ' ^/,/i ' ^^^''^ ^ij^ *^®" ^'^^ ^*^ **'* °^ ^'Z *® 

Since tr^ control structure jnust satisfy tte remt-tmie specifications for ali time, 
ttie trace corresponding to the control structure will be a Infinitely long string. 
Since the control structure can be Implemented only If the trace can be generated 
using a finite program, it would be very awkward If the only feasible control 
structures were acyclic. Fortunately, It can be prch/ed that If any feasible control 
structure exists, then timrist «ctets a ^astt>le c<»itrol strtm^»» ttiat fires/^e blocks 
In some cyclic order. 



3.1: Existence of Cyclic Control Structures 

The theorem proved in IMs sec^bn can bi i^tated as: 
Si^ipoM them exists a strtoH) w«|«2^ * ' ' *^ ^ch t^at^«» satisfies 
the reahtime constraints. Then there also exists a finite string $ such that 
the string #** mfso sa«ifles tNi^Mil«^«rti» s|McMd«ttow. 

TMs theorem Witt be i^^mwd Mkig wsvaral teim^ 

Deffciition: A critical mindom of a control structore ^ for the constraint C^ Is a 
substring ^'z ••^ * " * *m ^* * *** contabis two occurrences of C^ but 
[#i] contairis no occurrences of Cy. 

The most critic^ w/ncfow for C^ is the critical window with the greatest 
vralght. 

Lemma 3-t: The strind e ^itlsftes ttte ta^ncy siN^&Wfc^tkins for C^ If and OTiy if 
If/ \^i ^or tte mo«t critical wbidow ffMm. 
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PrPQf; 

CHily If; Assume m satisfies tlie real-time specHicatkMis. Then any siiri>strlng 
of m of weight L contains C^.. in partlcutair,^ the substi^g 

ia^ ' ' ^ a a_^-1 of w^ght I., must contain C,. Shice [#,-] <ioes not 

contfl^ Cy, the sirtisW^o [^^ ^ w^^vt I, r^4^ wh«re < Is ari^Mrar^ ^naN 

contains one occurrence of C^, Therefore, ji^^j :Sly+<, «>0, 

It Assume ttie most cHtical window #^ has weight neater than 1^ . Let 7 
be any substring of [#y-, where |irl - •/• ir extets since: 

IC#/]r-!*/H>i,-» 

Since ^1 Is a critical window/ tiien [#^3 txKitalns no occtnreRces of C^- 
But t ts «k strf>string of [ifr^} md ateo dees nM oortidfi C^ . Hwice, 7 is a 
8ut>sti^g of m of weii^t 1^ tiiat does not contafri Vtm constrahnt path. 
Therefore, m does not satisfy the latency specdflcations. ■ 

CoroHarv: Since iff^ cont^ns two occurrences of C^, tiie period t>etween 
successive occurrences of C. must be \^^ than 1^ - |C^ |. 

This ieimna shows there is a time brit totwem the starts of successive 
occurrences of C^. The bandwidth ^>ecHlc«tions direclly IMt tMs Interval. 



Therefore, it wNI be assixMd timt Vtm latency ^^ecHlcelieiis 9m more severe than 
the bandvMth spectflcatims. If not, ttie lateecy sfieeMoetioM can ^ adjusted so 
that: 

The time remaintog iHitil tiie start of the next t^^Bairm^:^ of a constraint patii is 
called tiie Imxlty of tiiat constraint. Gh/en a control stiiictiire, we can constiuct a 
taMe c^ lajdties for each posil^ in tiie ccOTespqn<Nn9 string| e with tiw property 
that tite table entries are non-negative If and only if m satfsfles Mm latency 
specifk:atlons. IhB orriy difRculty is tai accurate detemyning tiie start of an 
occurrence of a constraint string. This wW be hancfled by fce^hig laxities fw tiie 
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tails of the constraint strings. The true laxity for a string will be reflected In the 
laxities of its tails If the start of the constri|int patii ^falsely identified. 

An element of the table d[/,j,^] is the laxity for the path 0^ , just before a^ is 

fired. The table should be thought of as rectangular with columns labeled by 
elements of «•* The entries in the first column are: 

d[/J,Ol-l/-lC,y| (3-1) 

since the constraint path C^ must occur by 1^ - 1*^/ /!• The remaining columns can 

be fHled in by simple recursion rules. 

if the next element in m is not the same as the fh-st element In a constraint 
path, the laxity for that path decreases by the weight of that element: 

a^^Cyy=&d[/,/,AH]-dC/,M>!a^l (3-2) 

There are two possttriHtles if the next element hn the solution Is the same as the 
first element in a constraint path. If this ^ the start of im occurrence of a 
constraint path, the laxity for the tail of that path should be no more than the 
current laxity for the constraint path. It is possible that the tail will already have 
a more severe laxity since different constraint paths can have identical tails. In 
addition, the laxity for the whole constraint path will become the original limit the 
Instant after the first element appears. Therefore, the laxity becomes the original 
laxity minus the weight of the first element. 

However, if a^ Is net the start of an occurrence of C^ . , the laxity should 

decrease by |a^|* Fortunately, this problem will be handled automatically by 

assuming that an occurrence of Cy . starts whenever a^ «Cy ,, If it is not part of 

an occurrence of C, ., c. . will appear again before all of C^ . appears. When this 
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happens, the laxity for C> ,^^ will have ^tocrcift^ed t>y ^e amcHuit the laxity for 
Cy , should have decreased If ttie start 6f the pa1*i httd not be^n hrcorretJffy 
Identified. When c. - appears again, the laxity for C^. ,^-| will be less than the 
laxity for C^ ,. Therefore: 



«i,"C, , ^ 



d[/,i + 1,A+1]-m//KdC/,M].d[/J+1.*]-|a;j|) 

(3-3) 



Equations (3-2) and (3-3) can be transformed to produce fules for computing the 
AE^Ist column of the laxity table from th^ Ath ac^Mm: 



d[/,y,A+1]- 



m//K<f[U-M], d[l,MMa^|) '^aic-Cfj-i (^*) 



As an example, itgute 3-1 shows the loixtty tafate for the control structure 46CD 
and the block diagram modiHe from figure 2-3. 

In this table, the laxities at time 60 are Identical to the laxities at time 30. The 
next column In the table would be identical to the column at time 40. The rest of 
the table becomes periodic, and all the entries are non-negative. The periodicity 

allows us to prove that {ABCD) will satisfy the latency ^;>ecMk:atk>n8 for ail time« 

This Is fCM'mallzed In the following lemmas: 

Lemy^ft 3-2: If: 

^/j dCU-m] ^ rfC/.M] and a^ » a*^ 

then: 
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Typical Laxity Table 
Figure 3-1 

Vyj dC/J.m+1]i rfE/.y^+i] 



Propf! From case analysis of (3-4) and elementary algebra. ■ 
Lemma 3-3; Let! 

•-•l ■■•"*-1 
*"•* •■■*/»>-1 

\f m- mlhr satisfies the latency specifications arid: 
then: 

-■'l-'2'- 
al^ satisfies the tetancy specifications. 
Proof: Construct ttie laxity table <f for «^ 

Since a^ "*^'i* (3-4) leads tb: 
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Sitnitariy: 

V,.^^.^^^<r[/.y^].d[/J^>0 (3^6) 

Therefore 
From leimna 3-2: 

Similar reasoning will show: 

Now <st*2/n-A ^ ^m* ^^ ^^^^^ 3*2 still applies: 

inductively: 

V, y^^^cf [/J^+ro-A] 2r d[#,/^] ^ (3-6) 

Combining (3-6) and (3-6): 

Therefore, from lemma 3-1, «»* satisflee the latency specifications. ■ 

COfQHfltry; Let «-a^ • - • a^_-|, fl-a^ • • • a^_^, and -y -a„j - • * • It •»-«#» 

satisfies all the latency specifk:atlons and d[/J,A]-d[/,y,m] fw some 

A^'/n, then mfi also satisfies the latency specifteations. The proof is by 
induction. ■ 

The main theorem can now be proved by sho^ng that any laxity table wilt have 

duplicate columns and applying lemma 3-3: 

Thewem 3-4: tf any string m satisfies the latl»tcy spe6lflcMion& then there exists a 
string of the form fi which also satisfies the tatenf^ specffications. 
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Proof: Construct the laxity table for ». There are a finite number of 
possibilities for each table entry since each entry is 1^- - |C^. | minus a sum 

of a finite number of |a^|'s. The number of different N^l's is limited by 

the number of blocks In the block diagram schema. The number of terms in 
the sum must be finite since each \a^\ is greater than zero and the laxity 

entry is also greater than or equal to zero. Therefore, the possibilities for 
each column are limited and eventually some column in the table wilt be 
repeated and k and m satisfying the conditions of lemma 3-3 exist. 

Applying the corollary to lemma 3-3 says a solution of the form afi exists. 
However, d[/ J. 1] "= t;-|C. -| S:d[/,y,/c], for all k (the rules for filling in the 

table never increase the laxities except to set d[/J,/(3 to l/-|Cyy|. 

Applying lemma 3-2 shows that /5 is also a solution. ■ 
The major implication of this theorem is that only cyclic strings need to be 
considered for static control structures. These strings can be enumerated, so the 
problem of finding a static control structure is in principal solvable. Since the proof 
also places an upper bound on the length of the cycle (equal to the total number of 
possible laxities at any position), so an algorithm that generated all possible strings 
would be effective In the sense that It would always halt In a finite amount of time. 
However, it would require computation time that grows exponentially with the 
complexity of the schema, so the problem would be computationally Intractable if 
this were the only algorithm. 



3.2: Generating Real-Time Control Structures 

The problem of generating a feasible control structure is a scheduling problem. 

The problem Is deterministic since the parameters of the problem are strictly 

bounded as opposed to being unbounded random variables. A wide varieties of 

special cases of the general scheduling problem have been studied, and some 

results are surveyed by Gonzalez [7], though relatively little work has been done 
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on scheduling In the presence of deadlines. 

Gonzalez and Soh developed a s'mpie tigorithm that mii^iizes Qie nun^er of 
processors used to schedule Independent tasks. The tasks are statically assigned 
to processors and always run to coo^ietton. The de^cffii^s for each task 
correspond to the period of ^e requests for that H^k and must be a power of 
two. Their algorithm Is not (^timal If the periods are rKrt a power of two and no 
optimal algorithm is known* although several heinistlc lUgorithms have been 
Investigated. 

Uu and Layland considered the problem of schedultag indepemlent tasks on a 
single processor [14]. Each task re<piests servtoe perkkKcaHy with^ a deadMie f or 
service coinciding with the thne for the next request. Hiey prescmt a methCKl of 
assigning' static prtorlttes to the t&sks th«t v^ll meet the deacM^s If ai^ statte 
assignment of prkMities wtH. fafi additloR^ they prove the schedule lArtiich executes 
the ta^ whose (teadMie is effirHest is optta^ in Jttie ^Mftse tt wH meet ttie 
deadNnes if any schedule wW. They tten prove ^wcmsary itfid siMoient con<mocis 
fw a set of tasks to be st^ieduted ^ tte eviiest deaijmie<£D) aigwithm to meet 
ail its deadlines, and conclude that ED algorithm altows !(»% utJIizatton of tiie 
processor as opposed to figures as k>w as 70% for static prk^ity aljprithms. 

Geiger extended the proof of the optimality of ED schedirfing to include ^e case 
were the requests are not perkKlic [6]. Flala presented the same basic proof and 
also derived necessary and sufFk:lent conditk>ns for the ED scheduler with a mix of 
periodic and aperk>dic tasks [5]. 

Mok investigated scheduling independent tasks on multiple Identical processors 
[16]. Mok shows that no optimal algwithm exists for this problem unless the 
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deadlines, compotation times and at feast some futtire request times are known. An 
algoHtfHti rela^d to ttte ED aiflorithm Is |>res©r»tea wMfeH fe stiown to be optimal if 
all requesis are simultaneous. This algorithm executes tho#e tasks ]k(iHth tfie least 
laxity, wh^ire the Aax/ty pf a ta^ ^ the dfMdline for^% tasH p^Hia its^ra^ 
computation time. Unfortunatjply, both the least laxity and EO ^chackilers are shown 
to be non-optimal even for tasks with periodic requests. However, the least laxity 
scheduler Is optimal for periodic deadlines where tasks may be executed at any 
time (!.e« if the deadlines are coincident with the next request, the least laxity 
scheduler is optimal if it is altowed to execute tasks bqfpre they have been 
requested). 

The problem of scheduling tasks related by a partial order on multiple Identical 
processors has been studied by Manacher [16]. peadllnes are specified for any or 
all tasks In the system. Manacher's algorithm derives deadlines for all tasks In the 
system by using the observatk>n that a task must complete executing in time to 
aik>w its successors to executed befpre their deadlines. The scheduler then 
executes those tasks with the earliest deadUnes that have had all their 
predecessors executed. This algorithm is not optimal^ and does npt consider either 
periodic requests or multiple start-times. However, it is a reasonable heuristic, 
especially as the number of processors increase. 

Unfortunately, none of these results generalize to the static control structure 
problem, even for a single processor, although control structures could be 
constructed which wcmM meet the condltfoms of the paiticuiar spetsial casie and 
satisfy the real-time constraints. For ex^Mpli, If^e btocl: (M^^^ consisted of 
unconnected (independent) blocks, the earliest de«idi)rie schecftiler could be used 
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with task / being block / and the reqimst pi^riod f or e^E^h task beii^ the mtnifflum of 
ly /2 and 1 /B^. The perk>d between requeata wouhJ havo to ba teas than 1^/2 

since (in the i^>aence of other infcMrmatiort) it is pesslbte fdr the task to b^ 
executed tmmedfatety after one request ar^ imm^it^^ly before tite foikiwih^ 
deadline* Lefama 3-1 says this tbae inta^al mt^t not b^ gi^ater than 1^. 

On the other hand/ these heuristics areliable to be overly restrictive, particuiariy 
since they tend to deal with independent tasks. It would be posslbie to derive 
faidependent tasks from a bk>ck diagram schema by treating the constraint paths as 
independent, but at the cost of introducing new bkxzks and much unnecessary 
computatkm. One promising approach for deriving a static control structure is to 
simulate some more general control structure unta a cycle in the trace of that 
control structure is fowid. An obvkxis choice of a mcMre gmrieral control structure is 
a least laxity scheduter (using laxities as defined for bk>ck diagram schema) which 
foHows the partial order for tiie tasks (bk>ck8) based on the constraint paths. 
McM^e precisely, tiie schmfuler would build a laxity t«dt>le, witli starred entries 
indicating constraints strings which cannot be fired because of tiie partial order. 
The scheduler chooses the first bk>ck of the unstarred constraint string with the 
smaHest laxity to head the next column. If two constraints have the same laxity, 
either can be fired next. Figure 3-2 shows sucdi a laxity table for the bbck 
diagram schema from figure 2-3 using tiie same latency specifications as figure 3-1. 

At time 40, none of the latency spectfkM^toris have Iwen violated* However* 
since there are now two constraints with iaxtty 0, at least one entry In the next 
column wilt be negative. By IWng C at time 10, an additional request for C is 
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Counter-Example to Least Laxity Scheduling 
Figure 3-2 

created with deadline 50. In the control robotics environment, the existence of 
this request makes scheduling impossible. However, if B is fired and C is delayed 
until time 15, the additional request also gets delayed to a point where it is 
possible to schedule all the requests. The least laxity algorithm simply does not 
deal with Interactions between requests and deadlines. 

It Is Interesting to note that the least laxity scheduler fails for this even If the 
constraint path AD is ignored. The remaining constraint paths AB and CD are 
Independent, yet they cannot be scheduled using the ED algorithm using the worst- 
case period of 1^ / 2. If periods are kept at ty-|Cy|, the tasks still cannot be 

scheduled by the ED scheduler if the individual blocks are scheduled separately. 
The failure in this case can be viewed as an inability of the ED scheduler to derive 
the proper phase relation between the tasks. 

The schedule shown in figure 3-3 is not the only least laxity schedule. For 
example, at time 25 CD has the same laxity as B and therefore C could be fired 
instead of S. However, the reader can verify that all the least laxity schedules for 
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this example fall to satisfy the latency speciflcattons. 

3.3: A Branch-and-Bcund MetrK>d for Genaratlng Cof^rol Structures 

Rather than generating acycHc control stnictwes an^ lookmg for a cycle, the 
algorithm described in «ils section works by^generalSng a dycHc control structure 
that satisfies the real-time sjaeclffcatlons for one of the constraint paths. The 
scMutions for other constraints palOis are cabined to form a control structure that 
satisfies all the real-time specifications. The bai^J s^Mnfl^ of f^lng btocks rules 
out control structures that are not shufRes of the constraint paths since these 
control structures perform redundant computations. Therefore, this algorittim should 
not miss any solutions. There are two major problems that the alg<Mithm has to 
deal with: (1) How many times must each constraint path appear In one cycle of 
the total control structure. (2) How should the constraints paths be combined into 
one cycle. 

3.3.1: DetermMng «ie Rel^^ve Fre«|uenoy of Constraint Paths 

The first step In the algorithm is to ctetemAne how many ^ne^ each cor^tralnt 
appears in one cycle of ttie total scrtution. Upper ami tower bo4«ids can be derived 
from the length of the cycle wd tiie b^lc latency, ^eclflcatton. Conskier the 
lower bound on the number of appearances of ccmstrabit /: let *^ be the number of 

appearances of C in one cycle of the scrfutlon if . Let w^ - jC^ j and c *" 1<»|* 
Since the latency specificaticHi for C^ requires C^ to appear at least once every 
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Ij-w, time units: 



k, S: --^— (3-7) 



This leaves c (the length of the cycle) to be determined. However, if C. appears 
kj times: 

c 2: A^.M/^. (3-8) 

More precisely, the algorithm starts with the assumption that each block and 
constraint appears once and that c =2t-. This approximation is used to derive A, 

for all constraints in the schema* If any A, increases, this Is used to update the 

minimum number of times each block in the constraint must appear, which In turn 
may cause c to increase. This process continues until all k. are consistent with c. 

In practice, this only takes a few iterations. 

Theorem 3-4 places an upper bound on the number of blocks in a cycle, but this 
bound is not directly applicable to the branch and bound algorithm since the 
branch-and-bound algorithm does not try all cycles of a given length. An upper 
bound on the number of appearances of any constraint can be easily derived if the 
number of appearances of the other constraints is held constant. 

First, an upper bound on the length of a cycle can be derived by applying 
equation 3-7 to all constraints except constraint /. Then the minimum weight of a 
cycle containing A . appearances of C . can be computed for ail / ^ j. Letting c^^^ 

be the maximum allowed cycle weight and c be the minimum cycle weight (not 
Including constraint /), the minimum weight of a cycle containing k. appearances of 
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C, is: 

c^kfWf (3-9) 

Therefore, the upper bound on k^ can be derived by reetricting the resultant cycle 

weight to be less than o^^^: 

k,^ ^^'' (3-10) 

This ignores the possibility of blocks In C^ alrdiady appearing In the cycle as part 

of other constraints. However, including wore appearances of constraint / will 
eventually cause the mbilmum cy<^ langdr to exceed ^^^g^- 

This still does not bound ^le mmbw of appearances for all ccmstralnts, since 
consb^abit / can appear more oft») tf coi»^natnt ^ af^ears more often, etc. mack^ 
an arbitrary bound on one constraint will jqlI^ bound thf nuortier of a{H>earances of 
aU other constraints. For example, requiring at least one constraint to appear only 
once places a fairly tight bound on ail constraint. However. It is not true that a 
solution of this type always exists. An exempte is sl^>wn bt 1|gpre 3-3, 



3,3.2: Strategies for Combining Solutions 

Once the number of appearances per cycles of each constraint path is known, 
the constraint paths can be permuted to form a contrcM st3i4Cture whtoh satisfies all 
the real-time specifteatkKis. Many of the techniques for improving the efficiency of 
'branch-and-t>ound* optimizatton algorithms can be appliad to this problem even 
though it is not an optimlzatkHi problem. An optimization problem seeks a 
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Block Diagram Where All Constraints Appear More Than Once 

Figure 3-3 

permutation of n objects that maximizes an evaluation function f of the 
permutation. 

A 'branch-and-bound' algorithm for this problem generates permutations for a 
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subset of the objects and extends tii^se permutations to larger subsets. The 
permutations to the subsets ai^e called part/3i/ $o/</t/cins, and ^6 arranged in a tree. 
Nodes in the tree correspond to partial solutions and tiie descendehts of a node 
are the extensions of that partial solution. Branch-and-bound algorithms are often 
more efficient than direct enumeratiofi since It Is often unnecessary to examine the 
entire search tree. The Icey to pruning the search tree is the dominance relation 
on nodes of the tree. The evaluation function f can be extended to arbitrary 
nodes of the search tree by defining the value of a non-termtnal node to be the 
maximum vatue of its descendants. Then rxKle A dominates node ff if and only if 
f(A)>f(B). The branch-and-bound algorithm may prune any subtree wf>ose root 
node is dominated by some node of the tree that has already been explored. 

In general, the dominance relation for a particular optimization problem cannot be 
computed without examining the entire tree, ^towaver, it is often easy to compute 
^xne wealcer relation. These weaker relatkxis are usually referred to as 
dominsnce rBlatlons In the literature, so we v^l( use the term strong dominance 
rele^lon to refer to the dominance relation that relates /I to S If and only If 
f(A)>nB). 

Branch-and-bound algorithm vary In the order the tree is searched and how the 
dominance relations used to prune the jooarch ^ee. Kphier and Steiglitz classified 
branch-and-bound al(K>rithms and initiated the theoreftical study of dominance 
relations [13]. They demonstrated the suit>rlsing result that pruning based on a 
stronger dominance relation does not always ii^prove the eflfclency of the at£prithm. 
However, ibaraici showed that stronger cknninance relations do lead to more eflteient 



-42- 



strategies for Combining Solutions Section 3.S.2 

fldgorithms for several common classes of braneh-ancHKHfrid idgorlthmsflO]. 

a^anch-and^boon^^gormm as <tofirad by Kohldr a^ Stdts^z also make use of a 
function g th«* places a upper bo^flid oe lite VfiAie of f ift eat^ imde. If L^ the 
maximum f(4) for leaf nodes A encountered, i>runl^ai^thGie8 wi^ jBr(^)^i. can 
only ifiqDrove the efficiency of ^le algoHthm. However, tt^ uf>per bound functton 
can al^> be viewed as a parbcidar domtai«ice relation. 

The con^ol structure probton as s^ted la not mi optlml2JitiiE^ pit^lem. However, 
It is still posslbte to d^ne a dominance rtiotion between m>des of the search tree: 
node A strongly dominates node B unless B leads to a vattd control structure and A 
does not. Assumfaig ^e nodes at each level are geimratedfei a random 
Ctexicographic) order, Hie best pruning for the aHK»^(^n^ to use is to retain the node 
at each level whk:h dmrinates the other nodes* If this *>ff*nam» relatiwi can be 
easily computed, the a^K>nthm can geniaxatft a valid c^mtrol structure \*rtthcMit 
backtracking. 

As a first step towards computing a dominance relatkm, define the sl^ck for each 
ctmstratnt to be the difference between the latency requirement and the latency 
actually achieved by the ccMitrol s^uctura. the coh^ratnt wWi the least slack is 
the most critlcai comtraint (MCC). The steick In Uie MD€ coi^ also be used as a 
value function to be maximized. If no control structure satisfies the reahtime 
constraints, the control structure maximizing the slack in the MCC is probably a 
good 'close' solution. Also, the slacks may be used to evaluate any heuristic 
algorithms for deriving control structures. 

The latency achieved by a static control structure for a constraint C^ is the 

weight of the most critical window for C^. Adding a block to the cycle of the 

-43- 



Strategies for Combining Solutions Section 3.3.2 



control siructure <^uifK»t mo^ease an/ slacks staice^Mewe^bt of some critical 
window wW be increased, l^exni^- exc^tiair iiioidd bsp If ti^ 
mn addit^nal occurrence cif som^yeosm^^btt pa^i^t^m^y ^ 
windows/ This cannot iiam^^fi If i^e blocka being added am etements of some 
otiier con^tr^nt patli, since no ^Kistndat fnatii Is c»nt«ibied In wither constraint 
path. Therefore, the MCC tiKic can ;tm tised as an ^tmrar tk^ 
branch^and-tkoued a^^sM^^Hn to m^cta^e the ftiCC slack. t4;>p»er boi«KJ fimctk>ns are 
iriso often used to fpikte the s^urch in lM^afioh^a^44sKHflid iip>rlttms^ sxample, 

the algori^iin could ahuwys mxp^na ttte nockr ^i^th thei|p«atasttmwr bounds 

If ^e slacks ki ea<A con^rakit are rMkiced t^ the ^saiae JHROtmt when a new 
bk>ck is added to the cy^to, «mn i!^ tmrtM wetuMKm stodc 

%MOuki be a doaiinant sohitten. Ufifortunatiify. IMs is no^ general^ the ^^sm. 

Ccmslder dh^fing a cycle «• tyf the cbhtrbl strucfture ir^ krtb t^^ $f . snd i^ ., as 

shown In Dgure 3-4. The ^^ , regkms ccHitaki one o<x:irrence of Cy, but [♦] 

contains no occurrence of C^. The critical vi^ndows of C^ mre ^f liij^ij^y 

Therefore* adding tdocks to ^Ifj TBgUm bmrBi^iSJSft V^^ and adc&ng 

bkxdcs to a #y. regkxi ino^Me the welj^ of f^ .^-, wid #^j. Evwi If |#y i| 

increases, the slack tor fc^ uM not debritase unless I*/ y I "■ «wy |#. , j . Tl»e slacks 

can not be used to compute a dominance reiatkNi skice the interdependence of 
c<mstraint paths may force new btocks to be added wittiki ttie most critical window 
of some constraint, while miother soiutk>n with a smaHer |yiCC slack might have a 
critical window of the right size in the right place. 
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Keeping vectors of slacks for each constraint path does not correct the problem. 
Consider the example shown bf figure S-a with the latency specification as shown 

in figure 3-6. It can be easily verffled that {AXFCAEi^f \s a feasible control 
structure for this s<^iema. It is ateo V^m ml^ feasiWa contrcrf structure''. AD and 
CF must appear at least twice in one cycle of the solution. Figure 3-5 shows 
slacks for this constraints for two partial control structures. The merging of 
i/U>ADf and {CFCFf that leads to the solution Is {ADFCADFcf. However, the 
slacks for CF in {ADCFADCFf are larger and the slacks for AD are the same, so 
iADCFADCFf would dominate {ADFCADFcf even though It doesn't lead to a 
solutk»i. 



3.3.38 Perfwmance of tbe^gortthmr 

Assume each constraint path contains an average of k btocks. The slack of a 
constraint path in a trial cyclic solution can be determined in at most k scans of 
the cycle. If there are n constraint paths there wHI be oink) scans of each trial 
soiutton generated by the algorithm. The trial cycles will be oink) btocks long (this 



1. This was verified by checking all qypttc control structures that might be 
generated by a branch-and-bound algorithm assuming that the least critical 
constraint cuily appiiars once pe^r cycle. 
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Fi^^e 3-6 

ignores the possibility of a constraint appearing several times In one cycle). The 
overall time complexity of the algoiithm wW be oC/i^fcZ) ^i^^^ the number of trial 
cycles generated per prc4>lem. 

Assume the trial cycle contains m ^ b\<^ks and the next constraint path contains 

iBg blocks. There are (m^+mg-l)! cycles containing aH the btocks, but we are 
only Interested In one of the m^\ permutatkxis of ttm bkxdcs In the old cycle, and 
(/Hg-I)! perroutatkMis of the bk>cks In the new constraint (Le. we must consider 
m-, different phase relatk>ns ^ tte tW6 cy<^^>i TOeeefcM^e, the number of difl^rant 
trail cycles generated at this step is: 



(3-11) 



(m -j+iHg-^l )? ^m -j+mg-l \ 

/n,r(m2-1)! "'^M «^1 J 

Of course, If some bk>cks of the new constraint are abtiady contained In the c«d 

cycle, or if the next constraint appears more than once, not aB of ttie generated 

cycles will be distinct. However, It is rattier dilteurt tb aVctef ^neratfng these 
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cycles. There will be relatively little extra cost to the algorithm as long as it does 
not investigate cycles that are identical to cycles that have already lead to 
failures. Therefore, the number of trial cycles generated by the merging algorithm 
when it finds a solution without baclctracking Is approximately: 






(3-12) 

Equation (3-12) Is oikn^"^^) since the binomial term in the sum is o(n^) and there 
are n terms. 

If the merging algorithm fails to find a solution, then it must have backtracked 
through each trial solution and the total number of cycles generated Is: 

(1+a(2'^^-^)(1+ ■ . . (1+*(''^^"^)) " - ) (3-13) 

which can be approximated: 



fi*(V) 



(3-14) 

Equation (3-14) is oiiKn^)^"^ or oik^n^% and is exponential in the number of 
blocks In the schema. This is a very loose upper bound and would only be 
achieved If all generated solutions were plausible except when the last constraint 
was being merged in. However, this bound Is achievable if the first n-^ constraint 
paths had relatively large latency specifications while the last constraint path had 
relatively small latency specifications. This situation can be easily avoided by 
starting with the path with the smallest latency constraints relative to the weight 
of the path. 
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3.3*4: Speeding up the A^K3>r!thm 

There are many ways the average perf9p:B)anQe of the algorithm could be 
Improved. For example. If we bad a tii^ter tower bQuiKl on the slack In the MCC, 
we could prune more subtrees. We caiiget.at|ghtw|K>Mnd by determining whal: 
new blocks must be added to the control structure. Adding a new bk>ck always 
hrcreases the size of some critical wlr^^>w for a ccMistraInt by at least the weight 
of the bk>ck. Therefore, If the sum of ttie slacks for a eonstrauit Is Jess than the 
total weight of blocks that must be added to the control structure, at least one of 
the critical windows fcM" that path will exca^ the latericy apeciipcatlon for that 
path. This tighter bound ha^ no effect on the performance If no backtraqking Is 
necessary. However, If no solutkMi is found, using the tighter bound Is roughly 
equivalent to reducing n, since fewer ccmstralnts need to be combined before the 
control structure is recognized as infeaslble. 

>tot|ce that the performance of the ^Ij^lthm would not be of polynomial 
complexity even if there were a dominance relatton that totally ordered the 
possibilities at each level. The problem is that the number of partial soiuttons that 
must be generated by a naive algorithm can grow exponentlaHy with the complexity 
of the schema* Therefore, finding a good dominance relatkMi Is not as important as 

finding a search function that generates nodes that are most likely to lead to a 

<■ . . . 

solutk>n first. 

Since the weight of the critical windows increase when new blocks are added, 
we might try merging in new constraint paths so that no new bk)cks are added 
before trying more general mergings. This will improve the performance if the 
80lutk>n is an extensk>n of this type of merging, even if the algorithm must 
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backtrack since fewer nodes are generated on that level* If the algorithm must 
backtrack through all the control structures of this type, the performance of the 
algorithm is somewhat worse. The effect of this heuristic may be approximated by 
reducing k^ since the length of the strings merged into the current control structure 
will be reduced. 

The other way of improving the performance of the algorithm is to reduce the 
complexity of the problem. This can be done by replacing sub-graphs of the block 
diagram module with new blocks. Whenever the new block is fired, the blocks 
comprising the subgraph replaced by the new block are fired in some fixed order. 
This replacement can dramatically reduce k, and would improve both the best- and 
worst-case performance. However, combining blocks in this way can result in a 
schema which has no feasible control structures even though the original schema 
does. 

Since the process of generating a control structure can be so time consuming, it 
would be extremely useful to quickly identify real-time specifications that are 
Impossible to satisfy. One way of doing this is to compute the percentage of CPU 
time required by each block. If the sum of this percentage over all blocks in the 
schema Is greater than 100%, the latency specifications are obviously unsatisfiable. 

The percentage of the CPU required by each block is easily computed: each 
constraint C. must be executed at least once every 1^- 1 C^. |+i time units. 

Therefore, each block c^. . in C^. must be executed at least once every ly-|C^|+« 

time units and its corresponding CPU percentage is: 
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J^ (3-15) 

If an block appears in several constraints, it$ CPU percentage is the maximum of 
the percentage implied by each constraint thB i^lock appears in. Using ^e 
maximum rather than the sum corresponds to assuming that each time the bk>clc is 
flr0d It will help satisfy all the constraiiits it /ippears in. Although this is not 
necessarily the case^ it Is a k>wer bound on the CPU jy^age. 

Another quick test for unsatisflable latency sp^cHk^ations is that the slack in 
each latency speciflcatk^ must be larger tiian tte computftic^ time for all bk>cks 
not contained in that constraint path. Ottierwis^, th^ I pcntkxn of some critical 
window for that constraint witl be too larg# (refer tollgMre 3-4). 

3*3.5: Practical Experience 

A branch-and-bound algorithm ^Mkibr to Mm tirm iietfNcrlbed Hbas^B has been 
implemented as part of a system for implementing cohtiittioi«i*tiffie bkxsk mmgrMtus on 
conventk>nal micro^processors. The {f^^dRMttfOcRit nmi on a rarP^T1/7d umter the 
imiX timesharing system. The bk>ck dlagriuii is itescrft^d iMsIng an intf^ac^d 
gr«^ics editor devek>ped by Jcrfin Pershing [iSJTTt^&u^^^ algorlttmi 

is only responsible for chod«iiig th6 drder to lai^^i^tnxtet'ttm^ obfSfct code 

for the bk>ck cflagram is pro<tLic^d by a separifte ph^Am. 

The program uses all of ^lehcnristi^i naft^GflM a|tK>VB except it does not 
combine sul>graphs into new bk>cks. Thf profj^iH^^i^ |||Mf to fM oqntrci slnictuna^ 
to satisfy most latency specificatkxis for small block ctograms using less than a 
minute of CPU time. So far, only one set of latency constraints has been found 
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where a valid control structure exists but no control structure was found by tlie 
program (see figure 3-3). Some latency specifications require more time to find a 
valid control structure. 

in the absence of a fast optimal algorithm, it is preferable to have a fast 
algorithm which yields 'good' control structures quickly. Heuristic algorithms are 
generally evaluated one of two ways: one approach chooses a fixed algorithm and 
derives an upper (or lower) bound on how far the algorithm's solution is from the 
optimal solution. For examplOi Graham's algorithm for scheduling independent tasks 
on multiple processors executes tasks which require more processing time first. 
The resulting schedule is no more than 4/3 times as long as the optimal schedule 
[8]. 

The other approach develops a family of algorithms each requiring polynomial 
time. As the degree of the polynomial increases, the solutions found by the 
programs are closer to optimal The family of algorithms Is monotonic In the sense 
that the an algorithm taking more time never produces a poorer solution than one 
taking less time. If the degree of the polynomial were increased to infinity the 
algorithm . would be optimal. However, it would also no longer be polynomially time 
bounded. An example is a series of scheduling algorithms empJoyIng limited 
lookahead [1]. 

The second approach does not seem applicable to the control structure problem. 
Limiting the breadth of back-tracking yields a family of exponential time algorithms 
with the exponent increasing with the amount of back-tracking. A family of 
polynomial algorithms would result if at most k blocks were merged at a time with 
no backtracking. However, these algorithms are very unsatisfactory if any 
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cc^straint must appear more than once. If ttie nunrtwriirf blocks fafi Urn cer^tr^rfirt 
path is less than k, tten ei\ Mocks ^or the seccxKl (a^ sutodquent) apfnarmce of 
the constraint will be merged coincident with the existing JOCGurrences t>f thMie 
btocks. If k \3 Inoreasects) this does ncit hapipen/ttefiBrforiMfK»of liie^tfgw 
ts orriy sttghify bett^ than tf«e con^ptote a^lOTMim^i^ 

3-4: Heuristics fw Generating Control Structures 

Steve Ward has experimented with some quick, simple heuristics for generating 
static control structures. Basically, the heuristk; constructe contrrf structures of 

the form (a^«y«l ■ • ■ )* where « is the most critical constraint path and fi, t, '» et 
cetera are taken from the other constraint pa^s. More specilteally, bk>cks from 
the next most critical cons^akit are added to fi v^ttt the restrictkm that |«^| is 
less than 1^. If more bk>cks remain in the consti^aint they are added to y so that 

{era I is less than 1^* Once ail oonslralnts tiiM#e |»e^ si»P^^ if^ thta way, the 

tetency speoifleatiMs i^e cttecR«fd; If they ara^^^Mitl«Nfikl then the a«^^ 
string^ a feasible con^titf struc^i^. 

The heuristk; wiltli^io^ iEuiH ItsMf tlelng the cmrtent sotu^cxi as e so the generated 
soiutk>n may also be of the form: 

Since these heuristics construct a cbnbr<rf structure rather than search for one, 
they run very quickly. However, they also do iwt fhd sduflcms to a fairly lai^ie 
number of latency specifteatkms, even for simple bk>ck diagrams. Still these 
heuristics are more attractive as a basis for an af^roXlmate algorithm, not only 

-62- 



Heuristics for Generating Control Structures Section 3.4 

because of their speed but also these heuristics could be extended to handls 
particular styles of block diagrams as the process of constructing control 
structures becomes better understood. 
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4: Static Priority Interrupt Qcfitrcrt Structurea 

In some applications, the tokens at the input links do qs& change continuously- If 
the control structure can detect MlMl^n input chfoges, the real-tliiie performance 
can b^ improved. Intuitively, this Is possible since if no inputs to a bkx:k have 
changed, that block does not need to be exeoMtf d* Qn the f vfrrngej, this type of 
control structure ought to do less computatkxi and therefore ought to have better 
real-time performance. On the other hand, better average performance does not 
guarantee better worst-case performance and speclflc questkMis of performarice 
must be answered with respect to a particular model. 

Although the prototypical example of a dynamic control structure is interrupt 
driven. It is important to realize that hardware Interrupts are not necessary. For 
example, a control structure could sample the Inputs until one or more inputs 
change. After all the computation Initiated as a result of these changes had 
completed, the control structure would continue to sample the inputs. In general, 
such a scheme would risk missing changes In the Inputs. However, the control 
structure can use the real-time speclfteations to guarantee this wHI not happen. 



4.1: Dynamic Control Structures 

IMany of the strategies for scheduling independent tasks to satisfy reahtime 

constraints mentk>ned in the prevkMJS chapter use dynamic control structures. For 

example, Liu and Layland use static prk>rity Interrupts and consider the case (in our 

terms) where the latency Is equal to the period between requests [14]. They 

consider the earNest deadline scheduler only in this context although the earliest 

deadline schedule is optimal for any sequence of requests and deacHlnes, as 

mentk>ned earlier. 

Given an optimal scheduler, is there any reason to consider a suboptimai 
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scheduler? The answer will be yes if a good suboptimal scheduler exists which 
uses less resources than the optimal scheduler. The earliest deadline scheduler 
needs to find the highest priority task to execute whenever a task completes 
(alternately, it needs to insert requests into the proper position in a task queue). 
A static priority Interrupt control structure also needs to find the highest priority 
task to execute. However, this is done in hardware by many existing computers, 
including current microcomputers. Also, the earliest deadline scheduler requires a 
real-time clock to compute the deadlines for each task from the request time and 
the latency specification. Therefore, static Interrupt control structures are 
sufficiently simpler than a earliest deadline control structure to deserve further 
consideration. 



4.2: Model for Static Interrupt Control Structures 

A static interrupt control structure associates a task with each block In the 

diagram. The tasks are related by a precedence relation consistent with the block 

diagram. Each task has a priority and may be /d/e, act/ue, or requested. The 

priority may be thought of as an integer with numerically greater priorities being 

better. 

When an Input changes, all tasks whose blocks are watchers of that Input 

become requested. The control structures chooses the task with the highest 

priority among the requested tasks. This task is active until the block complete 

executing when all Its successor tasks become requested and the task Itself 

becomes idle. If the control structure allows active tasks to be suspended while 

another task Is executed the control structure is call preempti\/e. Otherwise it is 
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/io/7-preemp(/i/0. Unless otherwise noted ccmm« structtfres we assumed to be 
preemptive. 

The latency performance of any statte Interrupt e<»tftrdl d^tictt^^e can be 
determined for each task by adcfing the ccHfipiifetk^ time ft^ that ta^tfe «»« 
maximum computation time used by ti^H^r prtortty t«*s wMe the task ts on «ie 
ready queue. The dlfflcufty In tWs «iaJysls Is In det^mlr*nr*E»w mycsh computation 
might be used by other tasks. 

The simplest case to cbnahter Is when all the tasks are /«<tepe«fefit (eacbtask 
consists of exactly one btock) €ach task / re<|t4ras t^ iWts df odtnpttta^»n ««<» 
has prtorlty p^, latency 1^, and bandwidth By. Without loss of generality, the tasks 
can be numbered so that: 

p^^p^^ . - . 
The overhead of associated v^th Interrlipts, aefedttng a ta^ executton, etc. 
wUI be ignored for the time being. We shaft also assume that all priorities are 
distinct. 

The latency for task / when Its inputs chantie dSscretefy Is simply the maximum 
elapsed time between a change In an input and ttie terBSWatlCMi of the task. This 
must be less than 1^ If the latency speclllcatton for task / is satisfied. The 

interpretatton of the bandwidth specification is also simplllled. Instead of 
specifying a minimum rate for sampHna Inputs, the bandwidth specifies the maximum 
rate at which an input changes. 

The latency speciftoation for task / will be satlsfted if and only If the bk>ck for 
task / can be completely executed during any time Interval of duratton 1^. During 
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this Interval, tasks with priority better than p^. will also be run, and the amount of 
CPU time used by higher priority tasks must be less than 1^ -t^. 

Notice that this model Is equivalent to the model used by Fiala. Fiala's P^ 
corresponds to t,, D. corresponds to 1., and T. corresponds to 1/By. Therefore, 
for a single processor we have the obvious restrictions: 

t, ^l.^-J- (4-1) 

/ 

and: 

n 

2 B;t; 5 1 (4-2) 

/«1 ' ' 

The summands in (4-2) are the fraction of CPU time used by task /. Obviously the 

total fraction of the CPU used by alt the tasks must be less than one. Equation 

(4-1) can be derived from (4-2), 

Lemma 4-1; The amount of CPU time used by n independent tasks using a static 
priority scheduler in a window of duration M does not depend on the 
relative priority of the tasks. 

Proof: The processor Is always busy If some task is requesting service. 
Changing the priorities of the tasks will never cause the processor to 
remain idle when some task requests service, nor will it affect when the 
tasks request service. 

Since the control structure only executes a task if some Input to the task 

changes, task / cannot be executed more often than once every 1/B^. time units. 

Clearly, a task uses the maximum CPU time if any interval if it requests service at 
this maximum rate. 

Assume task / requests service at times 0, 1/B^, 2/B^., • • - , and let C^{t) be 

the maximum amount of CPU time used by task I in the interval (0, t). The highest 
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priority task (task 1) always starts execu^g t«m#cHat^y after It requests servtee 
and executes for t^ time units, so it yvlH be executed iB^tlf^ple m the 

Interval. Let r *t- JB^tJ be the a^unt of tMne at the end of the inHndow «fter 

the last request for task 1. Task 1 wiff be execiitirq during the interval (t-r, t) 
since task 1 has the highest priority. How<iM^,JfrJ^t|, oiriy t^ urMs of 

computation will be used so: 



C^(t)^ [B-,tJt^+m//> 



L . I'i'J 



^«i.'~s7^i (*« 



The maximum amount of CPU time used by tilsM 1 in the Interval (Af, t^At) is: 

C^a+AO-CjCM) (4*4) 

We will show that this is maximized when At - by ehowirHi: 

C^(t+AO-Ci(AOiC,(0 

C-,(*+Af)-C,(t)sC^(Ar) (4-6) 

Since the requests for task t occur with a regubir i^wkic^ C^(0 is also periodic. 

In fact: 

C-,(t+1/B^)-C^(t) + t^ (4-6) 

Therefore, we need only consider At between and 1/B^, In which case: 

C^(AO-/n//j(t-,, At) (4-7) 

This Is the maximum amount of CPU time used by any Interval of duration At 

since the CPU time used cannot be greater than the duratk>n of the Interval nor 
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can It be greater than t-. If the Interval contains less than one period. Therefore, 

the Inequality in (4-5) holds since the left hand side is the amount of CPU time 
used In an interval of duration At starting at t 

The worst case for a set of tasks will occur when all tasks request service at 
time and continue requesting service at their respective maximum rates. This is 
true since the highest priority task will use its maximum amount of CPU time under 
these conditions, and by lemma 4-1, any task can be made the highest priority task 
without affecting the amount of CPU time used by the set of tasks. 

Define C^.(0 by: 



i-/'j 1 



''■-^, > 



The amount of CPU time used by tasks j and k Is not necessarily C^(0 summed 

over j and k. The difficulty Is that if requests for tasks J and k occur sufficiently 
near the end of the window and of each other then only the higher priority task will 
actually be executed. Therefore, it is necessary to determine a precise schedule 
for the interval from to L However, if we are only interested in how much CPU 
time Is used in this interval, lemma 4-1 assures us that we may assign arbitrary 
priorities to tasks J and Ac. 

However, a sufficient condition for satisfying the latency specification for task / 
is: 

r. ^t. + 'z C.(l.) (4-8) 

' ' y=1 J ' 

This equation can be made more intuitive if the time required by task J is 

approximated by: 
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Then equation (4^2) becomes: 



t/Byt. (4-8) 



'/^*/*'/y!l^*y ^"^'"^ 



This can be rewritten as: 



The denominator fn equation 4^11 represents the fraetio^clf CPU time a\/ailal>te to 
tasic /\ The effect of higher prtority tasks is equh/alent to reducing the CPU speed. 



4.3: Assigning Prh>ritlc» to Independent Tasks 

One of the weaknesses of traditkmal nMl-'tftM operattng systems based on 
static prk>rity schec^ng Is ttiat the system does not vm^ that Itie priorities 
assigned by the u^ are consistent wtSi rte r^il*tiiM ^pieidficatiens. Even If the 
system checked these spectftoatk>n8^ the uscmt stW niuat «»^i|^ priorities, which do 
not have a staRple reiatkHi to the r^aKtime sp^cMpiKlkins. The c^kxis strategy of 
assispring the highest priority to the task that requta^es tlie fastest response time 
does not work* Conskler the example in flgiH'e 4^1. Either task 1 or task 2 can 
run at tiie best priority since 1^ ^t^. if p^ "* Vi^» ttieri-{i^ > p^ mpa Mte Hie iatency 

for task 2 is: 
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Section 4.3 



*2* 



Z + minU, 16- ^ Uj 



- 12 + 8 + /n/n(2,0) 
-20^12-16 

However, the latency for task 1 if P2 ^ P^ is: 



1- [iiBgJta + m/n 



t. + 



*2' '1 B 



I'l'^J 1 



-2 + 



15 



24 

2 + 0+m//}(12,15) 
14Sl^ = 15 



+ m/n 12, 15 



2 y 



16 
24 



24 



*1-2 


•i-i 


1^ = 15 


t2-12 


"1-^ 


1^ -16 



Counter-example to priority = 1 / latency 
Figure 4-1 

The algorithm successively finds a task that can satisfy its latency 

specifications while assigned the lowest priority. If there are several such tasks, 

choose one arbitrarily. This task is assigned the lowest priority and removed from 

the set of tasks. The next task selected will be assigned a priority higher than all 

previously assigned priorities but lower than all tasks still unasslgned. This 

continues until no task remains or no task can be found that can execute at a 
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priority lower than all other tesks. In this case, rK) assignment of static priorities 
will satisfy all the latency speciflcatbns using only ohe processor. This algorithm 
will never make a bad choice. Consider the si^atk>n when one or more tasks 
remain yet no task can be assigned the k>west prtority. Any task that could 
possibly run at a k>wer priority has already been-«s^(Nr)f4 a ^iwer priority. 

4.4: More Complex Mbdels 

The model for static interrupt control structures made several simplifying 
assumptions, such as ignoring scheduling overhead, assumkig preemptive scheduling 
and distinct priorities. The model can be ea^y changed to account for different 
assumptions. 

4,4.1: Scheduling Overhead 

When a task requests service, the control structure must compare the priority of 
the task with the prkMity of the currently executing task. If the priority of the 
current task Is higher, then new request must be queued In some manner. When 
any task completes execution, the cohtrbt structure must select a new task to 
execute. Also, switching the processor between ta^fcs win genera% Involve 
setting up some processor registers. However, aH of these actions wIR occur for 
every Instance of a task requesting service, so these overhead costs can be 
Included in the maximum CPU time used by task 7 « t^. The basic algorithm of 

finding a task which can be assigned the worse prtority while stiir satisfying (4^6) 
Is still correct. 
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4*4.2: Non^pMemptive Control StitJCtures 

If the currently exacitting ta«fc always rur^ to comptetton*efore a new task te 
run, then the latency specification for a task must to large enough to altow for any 
task ^th worse prl^ty to axecute as w^ lis ITw €f^ tteie used by tasks with 
better priority. Thus, (4^6) lt>ec<Maaa: 

/"I n \ \ 

Lit, + S C.(l.)+ max (t,) (4-12) 

Again, the assignment algorithm does not require any changes. This is obvious If 
the algorithm fkids a valid assignment of priorities. Increasing the priority of some 
task relative to task / moves a task into the summation term in equatton (4^12). 
Since C>(t) is greater than or equal to t., making this change can only increase 

the right hand side of (4^12). 

4.4.3: Non-Distinct PrkMities 

For various reasons it may be desirable to assign several tasks identical 
prkMitles. For example, the computer hardware may only support a limited number 
of interrupt prk>ritles. Since the control structure is free to execute any of the 
requested tasks having the highest prfortty, aK tHifcs having the same priority as 
task / must be trMrtetf as If th«^ had higher pi4(iH1itt^^^ton checking the latency 
i^edfteations. TMs assumes that the contN^I d^metilPe orriy exec^tes^ tMsk / when 
all other requested tasks hav« priorities strfe^ 1iK>r»e thi^ 

However, this also makes the often unrealistic assumption that a task can be 
preempted by a task with equal priority, if this Is not the case It is necessary to 
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simulate the control structure on the w&rst case sequence of requests. It is not 
sufRcient to treat tt^se tasks as If they fm<t lower prft^Mrtty but are not preemptible 
s^ce a pair of ta^s can make a sequences of requests so that one cf th^m 
requests service^ agatoi v^He XhB othw la bfi^r^ a^te^^tted. Tta^fore, the firat ti^ 
can be executed twice while task / Is waiting fte service idtho^gli taak / Is i^iever 
preempted. 

4.6: Appl{catk>ns to the Control Structure Problem 

Verifying ths reahtlme performance of a static priority scheduler on mwe 
complex task structures is a stralghtf<»iAfard extenskx) of the veriflcatton for 
Independent tasks. A latency specificatkxi 1^ Is satlafled If and only if alt bkK:ks In 

the constraint path can ahirays be executed during any interval of duratk>n 1^. It 

becomes slightly more complex to compute the amoimt of CPU time used by higher 
priority tasks since some tasks (bk>cks) vMI not be runnabte when ottier tasks are 
requested. 

4.6.1: Chains of Independent Tasks 

if no btock appears ta more than one GonatndRt patT^ tNioonstrirint paths can 
be treated as tod^mident tasks* A task %^ never ba Isl9m«>t#€r by a request of 
a predecessor if the ragtime ^N^atifcatkms era met s^i^^^^^t^^ 
requests Is not less than the deadline for any one request. 

The priority assignment problem would be very much mcN-e dIfRcult If It were 

necessary to consider assigning different prk>rities to individual bk>cks In a chain. 
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Hovvever, it does not make sense to asslfn tower pirk»}ties to sc»e blocks \n t\fm 
constraint path, since ft rnric^ no *«ereTOe^ wNw^ in,^^^^^^ chain hiaher priority 
tasks are aUowed to interwpt. Therefore, att ttie tasks In the chain can be 
assl§ned ti^e same i;Miomy as ^e task^ ki tfie c^aln ^Hb^ie te»t ^k}rity. 

In the presence of overhead it Is more effl^cSant fe ^i^wrte one *supe^■task* that 
executes all the btocks consecutively rather than Incurring ttie overhead of a 
request for each btock In the chain. However, If the control structure is non- 
preemptive It may be necessary to create several smaller ^super-tasks' to reduce 
the amount of time that must be spent waiting for low priwlty tasks to complete. 
Deciding how many tasks to create and how large to make them could be made on 
the basis of how much CPU time needs tp be freed up In order to find a task to 
assign the currently worst priority. 

4.6.2: More Complex Ta«k Relattons 

There are fundamentally two ways dHTerent constraint paths can have a common 
btock: the common block can have more than one successor or It can have more 
than one predecessor. We wHl first consider the simplest example of each type of 
Interdependent constraints. 

Consider a block diagram In which btock A has succe?«3rs B and C. The 
constraint paths for this diagram «ure 48 and 4C. Since a request for A will always 
cause requests for both fi and C, B^-B^,^., Therefore, neither B nor C will be 

interrupted by requests for 4 as tong as the rei^t^e sf^eisracallons are met. 

^tow, If Pg > Pg then the sei^enoe of btocks es^cuted t^^never A te requeued 
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Is /I5C. Otheru^B the sequasce >lCfi wSI be executed. We can ttierefore replace 
the tasks A, B, and C by a tttsk that ex«(^tee ettiwr 40C >or 4CB. The latency 
8pecifk:aticm for the new task shoirtd be trfiesien so th«t tt wiH t>e eatisfted tf aitd 
only if the orl£^al latency ^»ec^llcatio» ara se^ied. These latency 
^»ecl1toatk>ns are ^tisHed tf and only if : 

^AB ^ *>j+^B+(*''^ f<^ ^o //rt^/'upts) (4-13) 

and 

'4c ^ ^A'^^c^Wnm lost to interrupts) (4-14) 

The CPU time used by interrupting tasks wHI be Identical for bo^ the 4BC and /KiB 
sequence, except if 48C Is executed, then B must be CK>neidered an intern^ting 
task In equatton (4^14), and similarly for C and equatknt (4-13). Uterefore: 

'4flC ^^''^^AB' ^AC'^B^ (4-16) 

and 

'4C8 " ''^^^^AC • *48 "*C ^ (4r 1 6) 

and we should choose the sequence that yields the greater latency. 

Now consider a block diagram in which C has two predecessors 4 and 8. The 
constraint paths for this block diagram are 4C and fiC. It is aJiib quite possibte to 
receive a request for C while C is already requested or suspended. However, If C 
was first requested by 4, the addittonal request will atiMirays be from B and vice 
versa. If this occurs the logical thing to do Is to have C executed only once, but 
in general the sequence 4C will be executed whenever 4 Is requested and BC wHI 
be requested whenever fi Is requested. 

it is sufficient tx> rsf^ace 4, 0, and C by two t^^s which exemited 4C and BC 
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respectively, ignoring the possibility that at times C may not need to be executed 
by one of the tasks. However, If no assignment of priorities Is found treating these 
tasks as Independent, it Is not necessarily true that n^ such assignment would 
exist if the common block C were handled more carefully. The difficulty is that the 
worst case sequence of requests becomes harder to construct. 

4.5.3: Combining Static and Dynamic Control Structures 

Rather than having the processor idle when no tasks are requested, it may be 
possible to have the processor executing a static control structure for some 
portion of the block diagram. In this case we would consider the static control 
structure to be the lowest priority task. There are no real-time specifications on 
this task in the usual sense, although we must still guarantee the latencies in the 
static control structure. This can be done by modifying the latency specifications 
so that even when the maximum amount of CPU time is used by the dynamic tasks, 
the static control structure still runs often enough. 

Consider a latency specification 1^. for C^. The blocks in C^ must be executed 

once in every interval of duration I.. The trace of the processor is no longer 

completely determined by the static control structure since the dynamically 
scheduled tasks will Interrupt the static control structure. However, the amount of 
CPU time used by these tasks Is known. Therefore, we need only choose new 
latency specifications for the statically executed constraints according to the 
following equation: 
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k 
l.' = l. - 2 C,(l,) (4-17) 

' ' y=i ■' ' 

Where constraints 1 tiirough A are executed by tJ-ie static priority interrupt control 
structure. 
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6: Summary and Conclusions 

We have presented a model for real-time computations that provides precise 
defbiitlons of reaK^ie performance. The model has ttieadditic»ial advantage of 
strongly correspondli^ to intuitfon. This midees the model Ideal for defining the 
aemantlca of a reahtime pro^ammirtg lanptage. Tlie model al^> avoids c^ose 
association with any iffif>tementatk>n. Ther^foperthe modei Is a^^teable to a wide 
variety of systems. Conversely, a lai^uage based on this model should be easily 
hnpleinentabte In a iN^le variety of ways, witinait encountering features of the 
model too ftnely tuned to a particular Implementation. 

Several strategies for implementing control structures for blocic diagram systems 
vmre investigated. The first strategy was to »id a ^l^tic execution order for the 
blo^s In ^e diagram. Control structtK^ea of thte type have been somewhat ignored 
for time critical applicaticma. An important r^adt ia that arty such control structure 
GCHJid be represented as a IMte cycte, atthous^ tto tounda on the lengtti of the 
cycle are so large tiiate^q^liclt entmeratioii^ la impractical as a syntheate technique. 
A tmMiCh«rKH>our^ ayntheais mettiod was dev»lo|^d, but taifortunat^ it is also 
^practical for lar{^ precoma. We auapact that the ayn^esia problem is NP- 
iXMnpiete (computationally intractableX but have h<^ prized this conjecture. In my 
CASe^ we b«Heve it la more promising to Jnveatigate fast heuristic algorithms f<^ 
syntfieaEMzlnsratatic control st^'ucturK. 

The next general strategy Investigated made use of the fact that In many 
applications ^e input values change at discrete timea. UhdiH^ this a^umption, 
biocic dlfl^ram schemata are closer to trudltlofiai models of reai?time computationa. 
Previous reae^^h has found optimal schechiters for the apeclirf case of one 
processor and tnd^^m<tent tasks. H<»ivever, afa^Her static priority schedulei^ had 
been ignored exc^t for the speciid case of the Men<^ ^ec^ficatlons being 
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identlcat to the bandwidth period. We develc^ed an elltelent atgdifHtm f or aseijip^g 
priorities to independent tasl^ whm ttte latency spe^fk^tion Is less thwn ^le 
bandwkttb period. The s^the^^^^ ^^Mques were mocmied to constriK^t control 
structures ^xr bloic* dla^^asi s^emata br wMch^ie:#to(^»^iMre fiot 1r^^^ 

Since ^e analysis of tbe reaMtaie p^rfofM^ee of block dfagram schemata undter 
a static priority control structure Is ^nrttarr to ^n SM^is <rf static rNrlorlty 
queueing systems, the priority assi^piment algei^ttm can also be aMIed to priority 
(^eueing systmns* 

Finally^ we <fiscussed sMie of tiieissi^s ttiat arise ^irtim more than one 
processor Is available to the conti^ol ^sme^mm^ Tte reah^sie |>efforman<» of 
multiproccMsw c(m^^ s^tic^res was wnrtyxed, «f^ abaoAite Ixxinds on the rMih 
time perfoniimce for a blook dlagraat saheaia wwT^ dert^^ed. If the real-time 
^ecdfkmtioiis can be met by a m«tf^m»eessof con^el stnictia^, the ofejeettve 
bec«iiM trt^mb^tg ^e numlmr 0f preeMa»»HweCted %> 1^^ 
control structure. Several special ewes are Icnown to Im IP^co«4>lete, so the 
general probieai is also NP^^^omplete. Howeiner. thme if reason to tHiUeve that 
siiMe irigoflflims wM procfcice controi stroctipas esl^ a tH»rt>w of pro^issers that 
difFers from the mtnimal number by a bounded teoliDri alHieK^ <io #«em& ^gertttms 
were invest^ated. 

Future work should jfkfcbBltify concentrate or elttterprovbig various sytv^esls 
problems to be WNuin^lete or flnittng ^flcleM^^ -^ 

problems msl iritractable/ tlie perfofman^ of ^arlllctent hmirli^ aticmld be 

studied. Certainly ary Imptemefit^Hofi of 4i^ practical tai^ea^ system based on 
block diagram schemata sh^ld attempt to fled mid im^ove su€^ heuristic metiiods. 

•Tft- 
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A practical system should also attempt make use of more of the special cases for 
which efficient algorithms are known. 
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